- [Deleted Video]
- Determining Files and Folders Accessed in OS X - SANS DFIR Summit 2015
- Hardware Keylogger Case Study - SANS DFIR Summit 2015
- Mac Forensics - SANS Institute - DFIR - FOR518 - Sarah Edwards
- Oh, Snap!: Snapshots and Re-creation Testing in VMs - SANS DFIR SUMMIT
- Plumbing the Depths: ShellBags - SANS DFIR SUMMIT
- Plumbing the Depths: ShellBags - SANS DFIR SUMMIT
- SANS DFIR Webcast - APT Attacks Exposed: Network, Host, Memory, and Malware Analysis
- SANS DFIR Webcast - Detecting Evil on Windows Systems - An In Depth Look at the DFIR Poster
- SANS DFIR Webcast | Hands on USN Journal Analysis
- SANS DFIR Webcast - Incident Response Event Log Analysis
- SANS DFIR WebCast - Introduction to Windows Memory Analysis
- SANS DFIR Webcast: Privileged Domain Account Protection How to Limit Credentials Exposure
- SANS DFIR WEBCAST - Protecting Privileged Domain Accounts during Live Response -
- SANS DFIR WEBCASTS - Analysis and Correlation of Macintosh Logs
- SANS DFIR WebCast - Super Timeline Analysis
- SANS DFIR Webcast - When Macs get Hacked
- SANS DFIR Webcast -- You can panic now Host Protection is mostly dead
- Sick Anti Forensics Mechanisms in the Wild
- Windows 8 SRUM Forensics - SANS DFIR Summit 2015
- Windows Forensics FOR408 Rob Lee
- Windows Forensics Training Course - SANS Institute - DFIR - FOR408 - Rob Lee